<format>
	<id company="F-Secure" name="LogFile.log"></id>
	<description>Log file that is used by all F-Secure products to log the events that might be interesting for user. Usually its location is %ProgramFiles%\F-Secure\common\LogFile.log</description>
	
	<regular-grammar>
    <patterns>
      <pattern>*.log</pattern>
      <pattern>logfile.log</pattern>
    </patterns>
		<encoding>ACP</encoding>
    <head-re>
			<![CDATA[^ # every log line starts with newline
\d+\ {2} # line number
(?<date>\d{4}\-\d{2}\-\d{2}\ {2} # year month day
\d{2}\:\d{2}\:\d{2} # hour minutes seconds
[\+\-]\d{2}\:\d{2})\ {2} # zone]]>
		</head-re>
		<body-re>
			<![CDATA[^
(?<machineName>[^\ ]*)\ {2}
(?<account>[^\ ]*)\ {2}
(?<productName>[^\d\.]*)\ {2}
(?<oid>[\d\.]+)
(?<body>.+)
$]]>
		</body-re>
		<fields-config>
			<field name='Time'>TO_DATETIME(date, "yyyy-MM-dd  HH:mm:sszzz")</field>
			<field name='Body'>body</field>
			<field name='Machine Name'>machineName</field>
			<field name='Account'>account</field>
			<field name='Product Name'>productName</field>
			<field name='OID'>oid</field>
		</fields-config>
	</regular-grammar>
</format>